Threat Intelligence & Assessments Service

THREAT INTELLIGENCE & ASSESSMENT SERVICE

CSA’s cyber intelligence assessments use our unique combination of open and closed source intelligence feeds designed to detect threats outside of an organisations normal working environment. These feeds provide a comprehensive analysis of the potential source of an attack, the likely methods and techniques that can be used by an attacker and the potential impact on a business.

The cyber threat intelligence & assessment services are conducted within the CSA Security Intelligence and Operations Centre (SIOC) by our experienced and trained Cyber Analysts. The service can also be used in parallel with the CSA end-point detection service (BORDERPOINT) and protection service (APPGUARD) to provide both an internal and external cyber managed service.

INTELLIGENCE MONITORING & ALERTING Our intelligence monitoring service is based on an agreed pre-defined client ‘asset list’ customised to meet the needs of any business. A monthly report will focus on the client’s risk areas, plus a broad analysis of the global client sector, identifying common threats and known techniques, tactics and procedures, used by potential attackers.

A TYPICAL ASSET LIST WILL INCLUDE THE FOLLOWING: -

Web Domains e.g. domain.com Mail Domains e.g. domain.com IP Addresses e.g. 10.1.1.1 DLP Indicators e.g. Strictly Confidential Applications e.g. https://play.gogle.com/store/apps/ Social Media Official Pages e.g. https://www.facebook.com/Company Company Names e.g. Example Company Ltd Secret Project Names e.g. Project Morpheus Sector e.g. Finance Countries of Activity e.g. UK Login Pages e.g. domain.com/login VIP Names e.g. Joe Bloggs VIP Email Addresses e.g. joe.blogs@company.com

It is appreciated that any potential indicator of compromise or threat to an organisation may need to be alerted to the client as quickly as possible. Our Intelligence Alerts, categorised as HIGH impact by our analysts and the client, will be notified within 4 hours of discovery (within SIOC operating hours).

INTELLIGENCE INVESTIGATIONS Our intelligence investigations package is an optional capability that provides detailed technical analysis of any of the monthly customer findings and/or alerts. These deep-dives provide the technical findings, discovered digital footprints and proposed remediation actions contained into a stand-alone report.

COMPLIANCE CHECKS Our intelligence assessment service extends into tailored compliance and due diligence checking.

This service utilises the capabilities of our Threat Intelligence Platform and the skills of our analysts, to provide a range and depth of unique checks for our clients.

ADDITIONAL CSA SERVICES

MANAGED SERVICES

SECURITY ASSESSMENTS

Providing around the clock managed cyber services from the CSA SIOC from a team of Cyber professionals.

Our range of security assessments cover both technical and operational aspects for any business.

Your expert information security partner

PRODUCTS

TRAINING

CSA produces its own and re-sells a number of specialist cyber products.

CSA provides a range of cyber training services designed to meet an organisations needs.

CRISIS RESPONSE

CONSULTANCY

Our crisis response service is run through the CSA SIOC providing a number of services to help companies when something goes wrong.

The Senior Team at CSA provide a range of cyber consultancy services to assist companies understand cyber security.

+44 (0)1452 886982

|

UNIT 11, WHEATSTONE COURT, WATERWELLS BUSINESS PARK, GL2 2AQ

|

W: CSA.LIMITED

THREAT INTELLIGENCE & ASSESSMENT SERVICE